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MEMORANDUM FOR: Deputy Director for Administration 


FROM: Janes H. McDonald 
Director of Logistics 
SUBJECT: Contractual and Industrial Security Oversight 
Don: 


1. During the last quarter of 1977, the Acting DDCI, 
Jack Blake, directed the formation of a task force to perform 


an in-depth review of industrial contracting industrial 
security in CIA. That group was ired b 25X1 
Office of Medical Services. Hr. Chief, Procure- 25X14 


ment Management Staff, Office of Logistics (OL), was our DDA 
representative to the task force. The. group finished its work 

jin early 1978, with subsequent review and approval of resulting 
recommendations taking place at Executive Advisory Group (EAG) 
meetings in April and May of that same year. There is attached 
a current report which lists recommendations by the task force, 
approvals and dates of said approvals, offices to which action 
was assigned, and current status. . You will note that the 

largest number of recommendations involve either OL or the 

Office of Security (OS). You will also note that of 51 approved 
recommendations and/or directions, 39 have now been completed. 
Two of the recommendations, #8 in the Industrial Security 
Interim Report, and #15 in the Final Report require that the 
Inspector General (1G) conduct periodic functional audits and 
inspections of the industrial contracting and industrial security 
process. These recommendations became the basis for the ; 
current IG investigation bein db OL 25X14 
was tasked by the Acting DDA, Oo act as . 
coordinator for implementation of approve recommendations and 25X1 
also to provide periodic reports to your office. These reports 

were biweekly initially but have been aperiodic during the last 

few months because of the fact that only a few recommendations 
remained to be completed, most Teng term. 


OL 9 1665 
Downgrade to AIuO 
when separate from 
attachment 
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SUBJECT: Contractual and Industrial Security Oversight 


2. I would be happy to meet with you at your convenience 
to discuss any or all of the recommendations as well as action 
o date to implement said recommendations. Mr. Charles 
jin OS has asked that he also be included in any briefing 
to you on task force recommendations and subsequent implementa- 
tion action. 


25X1 
James H. McDonald 


Attachment 


Distribution: 


1 - OL Official 
1 - D/L Chrono 
1 - OL/PMS Subje 
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RECOMMENDATION OR DIRECTION 


Industrial Security Interim Report _ 


Recommendation #1: That remedies avail~ 
able in contract law be used as the primary 
means of enforcing contractor compliance 
with industrial security standards. 


Recommendation #2: That the Agency 
explore legislation which would empower 
the DCI to impose sanctions on industrial 
security contractors who fail to conform 
to security performance standards. 


Recommendation #3: That Director “of 
Security responsibilities for the 
Agency industrial security effort be 
clearly defined in the Office of 
Security series of Agency regulations. 


Recommendation #4: That Agency regula- 
tions be revised to clearly charge the 
Director of Communications with responsi- 
bility for and enforcement of communica- 
tions security at Agency-sponsored 
contractor facilities, including those 
of National Programs. 


WARNING NOTICE 
INTELLIGENCE SOURCES 
AND METHODS 1.VOLVED 


STATUS 


“SECRET 
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CONTRACTUAL AND INDUSTRIAL SECURITY OVERSIGHT 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


0GC/OLC 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


ATTACHMENT 


TARGET COM- 


PLETION DATE 


STATUS 


COMMENT/ 
RECOMMENDATION 


Complete 


On 11 Jan 79, Brian Walsh, staff 
member for the Subcommittee cn 
Federal Spending Practices and Open 
Government, stated unequivocally 
that any legislative punitive sanc- 
tions against contractors violating 
industrial contract security provi- 
sions would not be considered 
further. No punitive provisions 
will be included in acquisition 
legislation. 


Complete 


Complete 


) 


RECONMENDATION OR DIRECTION APPROVAL STATUS 


Industrial Security Interim Report 


Recommendation #5: That Agency regula- 4/18/78 
tions be strengthened to give the Director . 6/2/78 
of Security clear responsibility for the 
overall coordination of the entire indus- 
trial security effort of the Agency and 
for ensuring that classified procurement 
security support is well organized and 
effective, These regulations should 
include provision for: 


--Security audits of procurement 
security management practices within 
Agency components as well as security 
audits of contractor facilities; 


--Technical supervision of all 
industrial security officers includ~ ' 
ing establishment of comprehensive 
reporting requirements; and 


--Implementation of an Industrial 
Counterintelligence Program, includ- 
ing the scheduling of audio 
countermeasures inspections of con- 
tractor facilities and the estab- 
lishment of a close working liaison 
with the FBI with respece to 
industrial security. © 


Recommendation #6: That the Director 4/18/78 
of Security be required to prepare a 6/2/78 
written review of the fitness reports of 
all industrial security officers as to 
their performance in carrying out his 
security policy. ed 


SECRET. 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


D/Sec 


SECRET 


TARGET COM- 


PLETION DATE 


STATUS 


Complete 


COMMENT/ 


RECOMMENDATION 


RECOMMENDATION OR DIRECTION 
LLU VERECLTLON 


Industrial Security Interim Report 


Recommendation #7: That the Director 
of Security develop a centralized index 
of the industrial security status of 
contractor personnel and facilities to 
improve security oversight. 


Recommendation #8: That the Inspector 
General perform functional reviews of 
the Agency Industrial Security Program. 


APPROVAL 


SEGHET 


ACTION 


NECESSARY FOR 
ASSIGNED TO 


STATUS IMPLEMENTATION 


4/18/78 D/SEC 
6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


TARGET COM~ 


PLETION DATE 


Fall 1979 


COMMENT/ 


STATUS RECOMMENDATION 


Conversion of the industrial 


security approvals of contractor 


personnel into an automated system 
(SECOND Program) has commenced. 
It is estimated that this effort 
will be complete by Fall 1979. 


Complete. 


25X1 


RECOMMENDATION OR DIRECTION 


APPROVAL 


Industrial Security Interim Report 


Recommendation #10: That the Director 
of Security be responsible for monitoring 
the security responsibilities of the 
contractor. The enforcement of contract 
terms, including those covering security 
performance, remain the responsibility 
of the contracting officer. 


Recommendation #11: That procedures be 
revised to provide for a single industrial 
security officer to be responsible for 
inspection and policy guidance at each 
contractor factlity wherever cover and 
operational security permit. 


Recommendation #12: That the necessary 
staff realignment and augmentation be 
approved and that added contractor costs 
be absorbed by the sponsoring office. 


Recommendation #13: That a uniform 
industrial security manual (currently 
in preparation) be completed at the 
earliest possible date and that the 
performance standards contained therein 
with appropriate annexes be incorporated 
in the provisions of classified Agency 
contracts. Community~wide coordination 
and acceptance of the uniform manual . 
should be encouraged. 


STATUS 
4/18/78 


6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


SECRET 


ACTION - NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


D/SEC 
D/L 


SECRET 


TARGET COM- 


PLETION DATE 


April 1979 


STATUS 


Complete 


Complete 


Complete 


COMMENT/ 


RECOMMENDATION 


Manual in process 
of being printed. 
Should be ready for 
distribution late 
April/early May. 


RECOMMENDATION OR DIRECTION APPROVAL 


Industrial Security Interim Report 


Recommendation #14: That the Director EAG 
of Security periodically review variances 
and waivers recommended by industrial 
security officers to ensure compliance 
with Agency security policy. 


Recommendation #15: That "requests for 
proposals" which anticipate classified 
contracts describe security requirements 
and require that the contractor include 
in his proposal his plan for satisfying 
those requirements. 


Recommendation #16: That contractor 
performance in the security area be 
considered as a critical element for 
consideration in the contracting 
officer's determination of responsibility 
prior to awarding contracts. 


Recommendation #17: That incentive/ 
award fee type contracts include 
security performance along with other 
performance requirements as a basis for 
fee determination. 


Recommendation #18: That classified 
contracts shall incorporate specific 
security performance standards as well 
as language that stresses the impor- 
tance of complying with all security 
requirements. 


STATUS 


4/18/78 
6/2/78 


4/18/78 


6/2/78 © 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


SECHET 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


D/SEC 


SECRET 


TARGET COM- 


PLETION DATE 


STATUS 


Complete 


Complete 


Complete 


Complete 


Complete 


COMMENT/ 


RECOMMENDATION 


Conflicts resulting 
from such variances 
will be referred to 

the Director of Security 
(Attn: DD/PTOS) for 
resolution. 


RECOMMENDATION OR DIRECTION 


Industrial Security Final Report 
SSE EE EEE 


Recommendation #1: That there be one 
delegation of contracting authority 
from the DCI to the D/Log with redelega- 
tion of that authority to the contracting 
officers for National and CIA Programs. 


Recommendation #2: That decentralized 
contracting procedures be continued as 
the most cost effective method of 
carrying out industrial R&D contracting. 


Recommendation #3 (ISIR #4): That 
Agency regulations be revised to charge 
the D/Sec with specific responsibility 
for the physical security protection 
of communications centers located at 
Agency-sponsored contractor facilities, 
including those of National Programs, 
and also be revised to charge the D/CO 


APPROVAL 


Disapproved 
EAG 
DDCI 


STATUS 


5/23/78 
6/2/78 


No determination. 
Recommendation requested . 


by DDCI. 


EAG 


- DDCT 


with specific responsibility for emanations, 


transmission and cryptographic security 
protection at these facilities. 


Recommendation #4 (ISIR #6): That the 
D/Sec participate joiatly with Agency 
procurement components in preparing 
Letters of Instruction (LOIs) for each 
ISO and te prepare, as part of the 
fitness report cycle, a written evalua- 
tion of his or her performance in 
carrying out security policy. The 
D/Sec's evaluation will be show to 
the Office of Personnel (OP) for inclu- 
sion in the officer's official personnel 
file. 


‘ 


4/18/78 
6/2/78 


4/18/78 
6/2/78 


ACTION 


ASSIGNED 10 


NECESSARY FOR 


IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


COMMENT/ 


STATUS RECOMMENDATION 


Disapproved. No 


action necessary. 


Complete. 


Complete 


Complete 


RECOMMENDATION OR DIRECTION 
— ee RR DIRECTION 


industrial Security Final Report 


Recommendation #5 (ISIR #5): That 
Agency regulations include provisioa 
for the D/Sec to exercise functional 
Supervision over all ISOs and to set 
up comprehensive reporting require~ 
ments which will include a direct 
channel of communication between 
each ISO and the 0S. 


Recommendation #6: That the D/Sec 
examine the ISO support structure in 
order to recommend to the contracting 
components effective functional 
realignment and reporting responsi- 

‘ bilities. Emphasis should be Placed 
on a more efficient structuring of 


the Sanaa RC) staffing on 


Recommendation #7: That the Office 
of Legislative Counsel in coordination 
with the Office of General Counsel 
advise the DCI of legislative proposals 
which could severely impact on the 
Procurement authorities of Section 8 
of the CIA Act.. 


EGHET 


ACTION 


APPROVAL STATUS ASSIGNED TO 


4/18/78 © 
6/2/78 


4/18/78 
6/2/78 


No determination. 
Recommendation requested 
by DDCI. 


NECESSARY FOR 


IMPLEMENTATION 


TARGET COM- " COMMENT/ 


PLETION DATE STATUS RECOMMENDATION 


Complete 


Complete 


Complete 


: : ACTION NECESSARY FOR TARGET COM- : * COMMENT/ 
RECOMMENDATION OR DIRECTION APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 


Industrial Security Final Report 


Recommendation #8: That CIA continue No determination Complete 
to ptilize the ASPR to the maximum prac~’ 

. tical extent except in those areas in 
which the FPR is mandatory for all 
Federal agencies. 


Recommendation #9: That the D/Log No determination 
continue to issue notices on procure~ 
ment policy and procedures which 
complement the ASPR and FPR and permit 
sufficient flexibility for procurement 
responsiveness to mission requirements. 


Recommendation #10: That the Agency No determination. Complete 
continue to implement interagency Recommendation requested 
agreements for the development of by DDCI. 
national collection programs. 


Recommendation #11: That the D/L No determination 
issue procurement policy and procedural 
guidance for both Agency and National 
Programs and oversee their implementa- 
tion. ; 


Recommendation #12: That the Project No determination. August 1979 Adopted as an MBO for Logistics 
vfficer’s Manual be updated and issued | Recommendation requested by DDCI. in 1979. The primary manual will 
: go into typing during the week of 
28 May. Several addenda are still 
in the industrial contracting — . . in writing stage. 
Process. Particular attention should 
be given to guidance on industrial 
security matters, 


SECRET 


_ » ACTION NECESSARY FOR TARGET COM- COMMENT/ 
RECOMMENDATION OR DIRECTION APPROVAL STATUS ~ ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 
EAL LON OR DIRECTION SEEROVAL SrA ——— REL EMENTATION 2a mene suey: 


Industrial Security Final Report 


Recommendation #13: That the Project No determination. Complete 
Officer in the Contract Cycle course be Recommendation requested 
continued with emphasis on the specific by DDCI. 
role of the contracting officer, the 
auditor, the security officer, and the 
technical representative with respect 
to industrial security. 


Recommendation #14: That the D/Log, -No determination. 
in coordination with the Deputy Director 
for Science and Technology (DDS&T), estab- 
lish contract review procedures which 
will ensure adherence to Agency procure- 
ment policy consistent with National 
Programs requirements, : 


Recommendation #15: That the Inspector No determination. Complete 
General conduct periodic functional Recommendation requested 
audits and inspections of the indus- by DDCI. 
trial contracting process, 
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Recommendation #16: That the Director No determination. Complete 
of Finance and the Chief, Det A, jointly Recommendation requested 
conduct periodic reviews of the Policies by DDCI. is 
and procedures followed by.each of their 
components for the purpose of assuring 
appropriate application of contract 
audit policy and procedures. 


SEGRET 


Tt eee = 


RECOMMENDATION OR DIRECTION 


Industrial Security Final Report 


Recommendation #17: That the Inspector 
General arrange with representatives of 
the DCAA to conduct a joint survey to 
determine what action is required to 
improve audit services provided to 
Agency-managed National Programs. 


Recommendation #18: That the General 
Counsel and the D/Log determine what 
further manpower may be necessary to 
enable the division to. provide the 
desired legal support to the industrial 
contracting process while fulfilling its 
other assigned responsibilities. 


Recommendation #19: That the D/Log 
consider the establishment of a Deputy 
Director for Industrial Contracting. 


Recommendation #20: The the D/Log 
review the Procurement Management 
Staff to assure that it is staffed to 
earry its responsibilities. 


Recommendation H 
reduce : 
activities by redirecting competitive 


industrial R&D contracting responsi- 
bilities to the component contracting: 
teams. 


Recommendation #22: That the 
Inspector General determine if the 
functional review of industrial 
contracting requires additional 
personnel. 


SECHET 


ACTION 
ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 


APPROVAL STATUS PLETION DATE STATUS 


No determination. 
Recommendation requested 
by DDCIL. 


Complete 


No determination. 
Recommendation requested. 


Complete 


No determination. 
Recommendation requested by DDCI. 


No determination. 
Recommendation requested by DDCI. 


No determination. - 
Recommendation requested by DDCI. 


2 April. 79 


No determination. | 
Recommendation requested by DDCI. 


ae 


COMMENT/ 
RECOMMENDATION 


No additionay 
power requirs F 


Approval not recommended. 


One additional GS-15 
position will be added 
to OL/PMS. 


Procurement Note to be 
issued week of 23 May. 
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RECOMMENDATION OR DIRECTION APPROVAL STATUS 
SR EN OR _DERECTION ee pees 


Industrial Security Final Report 


‘Recommendation #23: That the DDA No determination. 
establish a working group to develop Recommendation requested 
Procedures for implementing ISIR by DDCI. 

Recommendations #15, 16, 17, and 18, 
and report to the DDA within 60 days. 


Recommendation #24: That the D/Log No determination. 
(for contracting officers) and D/Fin Recommendation requested 
(for auditors) participate jointly by DDCI. 
with Agency procurement components 
in preparing Letters of Instruction. 

The D/L and the D/Fin shali alse 
Prepare written evaluations of their 
Personnel assigned to Industrial 
Contracting Teams to ensure assess~ 
ment of their technical performance. 
These evaluations shall be shown to 
the individuals concerned, attached 
to their fitness reports, and 
included in their official personnel 
files. 


Recommendation #25: That a compart- Conditional approval 


mented contract management system be EAG 5/23/78 
developed which will include the DDCI 6/2/78 
requirements of the users of CONIF, 

STEPS and SPA, and that the D/Log 

establish procedures for utilizing 

this system to monitor the performance 

of Agency contracting elements, 


SEGHET 


ACTION 


ASSIGNED TO 


NECESSARY FOR 


IMPLEMENTATION 


TARGET COM~ 


PLETION DATE 


April 1979 


STATUS 


-except for receipt of LOIs 


COMMENT / 
RECOMMENDATION 


Disapproval recommended. 
15, 16, 17, and 18 
approved and moving 
toward implementaticn. 


Action complete for COs 


See discussion on last 
item of this report. 
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Recommendation #26: That the DDS&T 
seek guidance from the Director, NRO 
regarding accountability for property 
acquired with National Programs funds. 


Recommendation #27: That the DDA, 
in coordination with the DDS&T, estab- 
lish a computer-supported system to aid 
in control of classified document 
exchanges throughout the Agency's 
industrial contracting program. 


EAG ~ 5/23/78 


a. The Agency will maintain the 
dual delegation of contracting 
authority to the Director of Logistics 
and to the Chief, Contracts Staff, OD&E, 
as Che National Programs Contracting 
Officer, DDS&T, for Agency and National 
Programs respectively. 


APPROVAL 


Approved 
EAG 


DDCI 


SECRET 


ACTION . NECESSARY FOR TARGET COM- 
ASSIGNED TO IMPLEMENTATION PLETION DATE 


5/23/78 
6/2/78 


No determination. 
Recommendation requested by DDCY. 


Approved 
EAG 
DDCI 


5/23/78 
6/2/78 


STATUS 


Complete 


COMMENT/ 
RECOMMENDATION 


Agreement reached with 
NRO on procedure 


Because of wide scope, 
best directed by DDA 
and DDS&T, 


No action necessary, 


Continuation of exist- 
ing arrangement. 


3 


RECOMMENDATION OR DIRECTION APPROVAL STATUS 
b. The DDS&T shall establish a National Approved 

Programs Contract Review Board to review EAG 5/23/78 

System procurements and associated source DDCI ~ 6/2/78 

Selection procedures. The Board shall be 

chaired by the Associate Deputy Director for 

Science and Technology and have the follow~ 

ing membership: The Director of Logistics 

or in his absence a representative appointed 

by him; a Senior Program Manager appointed 

by the DDS&T; a Legal Advisor appointed by 

the General Counsel; the Comptroller, DDS&T, 

as a representative of Director of Finance; 

and a Security Advisor appointed by the 

Director of Security. The Chief, Procurement 

Management Staff, DDS&T, and a representative 

of Detachment A DCAA will act as advisors to 

the Board. The Board at its initial meeting 

shall recommend to the DDS&T its procedures, 

types of procurements, and criteria for 

procurements that will be subject to its 

review and approval. A copy of these procedures 

will be submitted for ny approval. 


c. The DDS&T shall revise and update the Approved 
current delegations of contracting authority EAG - 5/23/78 
for National Programs from the DCI to the DDCI 6/2/78 
Chief, Contract Staff, OD&E, to include the 
following provisions: 


_ (1) The National Programs Contracting _ 
Officer has direct access to the Director of 
Logistics for coordinating substantive matters 
and shall bring to his attention any problem - 
that could result in embarrassment or legal 
difficulty for the Agency. : : 


-S 


ent 


SE 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


DDS&é&T 


13 SEGRET 


TARGET COM- 


PLETION DATE 


i 


COMMENT/ 
STATUS RECOMMENDATION 


Complete Charter established. 
Documentation re- 


quirements set and 
projection of case 
loading determined. 


Complete 


> 


RECOMMENDATION OR DIRECTION APPROVAL 


(2) The National Programs Contracting 
Officer shall establish review Procedures © 
which will ensure adherence to Agency 
Procurement policy consistent with 
National Programs requirements. Any policy 
differences, which cannot be reconciled, 
-Shall be submitted to me with a request, 
accompanied by justification, for policy 
exception. 


d. The Director of Logistics shall Approved , 
ensure that the Procurement Management EAG 5/23/78 
Staff, OL, makes periodic inspections of ppcr 6/2/78 
the OD&E Contract Staff. 


e. The DDS&T shall provide that the Approved 
Director of Logistics or his designee, , EAG 5/23/78 
Chief, Procurement Management Staff, OL DDCI «—s«&G 2/78 
is the reviewing official on fitness : : 
reports for the Chief, Procurement Manage- 
ment Staff, DDS&T, and for the Chief, 
Contracts Staff, OD&E. 


f. Concerning Recommendation #25, Approved 
the DDA and DDS&T will work together to EAG 5/23/78 
establish an appropriate data base to DDCI 6/2/78 
ensure that essential contract informa- 
tion is readily available for responding 
to questions on Agency contracting 
activity. 


SEGRE Y 


ACTION NECESSARY FOR 


ASSIGNED TO IMPLEMENTATION 


Include National 
Teams on inspec- 
tdon schedule. 


DDA~DDS&T 


14 


SECRET. 


TARGET COM- 
PLETION DATE STATUS 


Complete 


As FRs are 
written 


, 15 Aug 79 


COMMENT/ 
RECOMMENDATION 


Agreement has been 
reached and teams are 
progressively being 
scheduled for inspec- 
tions. 

D/L or designee will 
execute. : 


Agreement has heen 
reached between 
Logistics and DDSsT 
on monitoring data 
from SPA. Necessary 
program changes are 


TOT een nye FP 


currently being defined. ' 


